EAP-TLS & computer account(not user)

[tnt at kalik.net]

>I use eap-tsl for the registration record of computer. It is necessary
>to open access to the network to pressure of Ctrl+Alt+Del.
>I will not understand what is the matter:
>
..
>radius_xlat:  'host/cit44'
>    rlm_eap_tls: checking certificate CN (cit44) with xlat'ed value
>(host/cit44)
>rlm_eap_tls: Certificate CN (cit44) does not match specified value
>(host/cit44)!
>chain-depth=0,
>error=0
>--> User-Name = host/cit44
>--> BUF-Name = cit44
>--> subject = /C=UA/ST=Berkshire/L=Newbury/O=zaz/OU=mis/CN=cit44
>--> issuer  = /C=UA/ST=ZaporozshE/L=ZP/O=ZAZ/OU=MIS/CN=Administrator
>--> verify return:0
..

User-Name and CN are not the same. Create a proper certificate.

Ivan Kalik
Kalik Informatika ISP